I went to a site that at one time that seems to channel its regular .html
extension files through it ASP engine.  I know you can do this in IIS, but
judging from the below example, is that what appears to be happening?  In
order to make sure every page is password protected, do you have to make
sure they all go through the asp engine, or is there another way?

Here's an example  (this is not the actual URL).

I type in:  www.xyz.com/members/mydocument.html

It somehow sees that I'm not logged in and returns this:

http://www.xyz.com/?reason=denied&script_name=/mydocument.html

Any clues here?

Thanks.

HWG: hwg-languages mailing list archives, maintained by Webmasters @ IWA